Download Kaspersky PURE - Parent Directory
Transcript
NOTIFICATIONS ATTEMPT TO ACCESS THE SYSTEM REGISTRY DETECTED When Proactive Defense detects an attempt to access system registry keys, a special notification pops up containing: The registry key being accessed. Full name of the file of the process that initiated the attempt to access the registry keys and a path to it. Possible responses: Allow – allows to execute the dangerous action once; Block – blocks the dangerous action once. To perform the action you have selected automatically every time this activity is initiated on your computer, check the Create a rule box. If you are sure that any activity by the application that attempted to access system registry keys is not dangerous, add the application to the trusted application list. NETWORK ACTIVITY OF AN APPLICATION HAS BEEN DETECTED If any network activity of an application is detected (default option for the applications included in the Low Restricted or High Restricted groups) (see section "Application groups" on page 88), a notification will be displayed on the screen. A notification will be displayed if My Computer Protection is running in interactive mode (see section "Using interactive protection mode" on page 156), and if no packet rule has been created for the application whose network activity had been detected (see page 103). The notification contains: Activity description – name of the application and general features of the connection it initiates. Generally, the connection type, local port from which it is being initiated, remote port, and address being connected to are given. Application run sequence. Action – series of operations that Computer Protection should perform regarding the network activity detected. You are asked to select one of the following actions: Allow. Deny. Create a rule. When this option is selected, Rule Creation Wizard (see page 104) is started, which will help you to create a rule, controlling network activity of the application. You can: Perform an action only once. To do so, select Allow or Deny. Apply an action to the session of the application whose network activity has been detected. To do so, select Allow or Deny, and check the Apply to current application session box. 261